[dinp]

You can add reviews under the chrome and firefox extensions to warn other users and then report both extensions (assuming you are confident about your findings).

More of a meta comment: this is pretty much why I don't install any extensions in my browser except an ad blocker.

You can use this as an opportunity to teach your friend about security so it doesn't happen again.

[matusfaro]

I'm still trying to setup a vm so I can analyze this extension in a quarantine.